From 2890bc5b6dd67115c67c4a38867671285ee7bbe9 Mon Sep 17 00:00:00 2001 From: Kurt Zeilenga Date: Thu, 20 Jul 2000 22:52:44 +0000 Subject: [PATCH] Fix entry/children always allowed bug! --- servers/slapd/acl.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/servers/slapd/acl.c b/servers/slapd/acl.c index b61b1570c1..cbed19b931 100644 --- a/servers/slapd/acl.c +++ b/servers/slapd/acl.c @@ -115,7 +115,9 @@ access_allowed( * by ACL_WRITE checking as any found here are not provided * by the user */ - if ( access >= ACL_WRITE && is_at_no_user_mod( desc->ad_type ) ) + if ( access >= ACL_WRITE && is_at_no_user_mod( desc->ad_type ) + && desc != slap_schema.si_ad_entry + && desc != slap_schema.si_ad_children ) { Debug( LDAP_DEBUG_ACL, "NoUserMod Operational attribute:" " %s access granted\n",